On 4/27/15, 1:11 PM, "Marvin Addison" <marvin.addison at gmail.com> wrote: >Extract a value from an extension field and ensure that it matches an expected value. That's very much in scope for a trust engine. >Unrelated to trust, so no. I'm not seeing how it's not related. If it's answering "should I accept this cert?", that's trust. -- Scott